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AMENDMENT TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS : 

1 . (Currently Amended) A method of managing an original executable code forming 
a program int e nd e d to be downloaded into a reprogrammable on-board computer system 
such as jn a microprocessor card (GR), the said code possessing a cryptographic signature 
(S I GN) and being executable by the microprocessor of the on-board system after verification 
by the latter of the validity of the said signature, the said method comprising the following 
steps consist i ng of at l e ast : 

off card: - identifying a modified executable code (Gl^ corresponding to the original 
code, adapted to a predefined specific use; and - from variations between the data of the 
original code and the corresponding modified code (G4^, calculating a software 
component (Gt) which, when it is applied to the original code, makes it possible to 
reconstruct the modified code; and 
- signing the said software component (Gt); 

downloading the signed original code and the signed software component into the 

card; 

on card: - verifying the signatures (SIGN, SIGN') respectively of the original code (G+) 
and of the software component (Gt=); - applying the software component (Gt^ to the original 
code (G9 so as to reconstruct the modified code (G4^ for its execution by the 
microprocessor. 

2. (Currently Amended) A method according to claim 1. charact e ris e d in that wherein 
the original executable code (Gl) consists of an intermediate code, executable by the on- 
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board system microprocessor by means of a virtual machine for interpreting this intermediate 
code. 

3. (Currently Amended) A method according to claim 2, characterised in that wherein 
the virtual machine is provided with an execution stack and i n that the downloaded software 
component (Gt), applied on card to the original intermediate code (Gt). makes it possible to 
reconstruct a modified intermediate code (d^ a priori satisfying the verification criteria for 
the said intermediate code according to which the operands of each instruction of the said 
code belong to the data types manipulated by this instruction and, on each target switching 
instruction, the execution stack of the virtual machine is empty. 

4. (Currently Amended) A method according to claim 3. charact e ris e d in that wherein 
the modified intermediate code {Gl^ obtained by the application of the software component 
is verified, before its execution by the microprocessor by means of the virtual machine, 
according to a process verifying that the modified intermediate code {GB satisfies the 
verification criteria. 

5. (Currently Amended) A method according to claim 1 or 2, charactor i sod in that ^ 
wherein the downloaded software component (Gt). applied on card to the original code (Gl). 
makes it possible to reconstruct a modified code so that its execution is more rapid 
compared with that of the original code. 

6. (Currently Amended) A method according to claim 1 or 2, charactorisod in that ^ 
wherein the downloaded software component (Gt:). applied on card to the original code (G4). 
makes it possible to reconstruct a modified code so that it procures an optimisat i on 
optimization in terms of size compared with the original code. 



